BYOVD - Hive0163

BYOVD - Hive0163 is a blue team lab that falls under the Malware Analysis category and will cover the following subjects: OpenSSL, Event Viewer, CyberChef, VirusTotal, Registry Explorer, IDA Pro, Python, Detect It Easy, PE-bear, pe-sieve, Execution, Persistence, Privilege Escalation, Defense Evasion, Discovery, Collection, Command and Control, Exfiltration, Impact.

Learning Objectives

Correlate diverse forensic artifacts to reconstruct a multi-stage ransomware attack, synthesizing insights from BYOVD, custom packer, and anti-analysis techniques.

Categories: Malware Analysis.

MITRE ATT&CK Tactics: Execution, Persistence, Privilege Escalation, Defense Evasion, Discovery, Collection, Command and Control, Exfiltration, Impact.

Tools: OpenSSL, Event Viewer, CyberChef, VirusTotal, Registry Explorer, IDA Pro, Python, Detect It Easy, PE-bear, pe-sieve.

Difficulty: medium.